... gument is a callable that returns None ( #28601 ). Fixed the Basque DATE_FORMAT string ( #28710 ). Made QuerySet.reverse() affect nulls_first and nulls_last ( #28722 ). Fixed unquoted table names in Subquery SQL when using OuterRef ( #28689 ). 目次 Dja ... ノート November fixes several bugs バグ 修正 Prevented cache caching default argument callable Basque Made QuerySet reverse affect first last unquoted table クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... l() to provide safe redirect targets and put such a URL into a link, they could suffer from a XSS attack. This bug doesn't affect Django currently, since we only put this URL into the Location response header and browsers seem to ignore JavaScript ther ... This part of the normal major release process was inadvertently omitted in 1.7. This backwards compatible change will not affect users who have subclassed django.contrib.auth.hashers.PBKDF2PasswordHasher to change the default value. Fixed a crash in t ... ... ights browser extension's automated checks feature, or an equivalent tool with the Axe checker. Where the UI changes could affect those modalities, also test with: Touch-only navigation. Common issues include: A touch target (interactive element) is to ... !important or inline styles may break forced-colors mode. Recommended assistive technologies ¶ Where the UI changes could affect assistive technologies, here are popular free options we recommend testing with. Windows の場合。 NVDA - recommended with ... ... l() to provide safe redirect targets and put such a URL into a link, they could suffer from a XSS attack. This bug doesn't affect Django currently, since we only put this URL into the Location response header and browsers seem to ignore JavaScript ther ... This part of the normal major release process was inadvertently omitted in 1.7. This backwards compatible change will not affect users who have subclassed django.contrib.auth.hashers.PBKDF2PasswordHasher to change the default value. Fixed a crash in t ... ... ights browser extension's automated checks feature, or an equivalent tool with the Axe checker. Where the UI changes could affect those modalities, also test with: Touch-only navigation. Common issues include: A touch target (interactive element) is to ... !important or inline styles may break forced-colors mode. Recommended assistive technologies ¶ Where the UI changes could affect assistive technologies, here are popular free options we recommend testing with. Windows の場合。 NVDA - recommended with ... ... al 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most production sites since you shouldn't run with DEBUG = True (which makes this page accessible) in your production sett ... ... al 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affect most production sites since you shouldn't run with DEBUG = True (which makes this page accessible) in your production sett ... ... gument is a callable that returns None ( #28601 ). Fixed the Basque DATE_FORMAT string ( #28710 ). Made QuerySet.reverse() affect nulls_first and nulls_last ( #28722 ). Fixed unquoted table names in Subquery SQL when using OuterRef ( #28689 ). 目次 Dja ... ... () ) accepted URLs with leading control characters and so considered URLs like \x08javascript:... safe. This issue doesn't affect Django currently, since we only put this URL into the Location response header and browsers seem to ignore JavaScript ther ... ... ctly True for GROUP BY queries (e.g. .annotate().values() ) on models with Meta.ordering . A model's Meta.ordering doesn't affect such queries ( #31990 ). Fixed a regression in Django 3.1 where a queryset would crash if it contained an aggregation and ... 2026年10月08日